$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/a0467b4e-5d33-3ebb-a8d2-3f908c2a1ce3.roa File: a0467b4e-5d33-3ebb-a8d2-3f908c2a1ce3.roa (raw, json) Hash identifier: otST7YWTpYuZSJ2KdfnRpw8v8xD8Fu0kobykVkmaqgQ= Subject key identifier: 76:9C:95:8B:89:F4:79:6F:ED:9F:21:68:96:E0:E9:94:31:A9:53:04 Certificate issuer: /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907 Certificate serial: 010D0C9F432858494E2EAD8AD53E3A5F5D1F6200 Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/a0467b4e-5d33-3ebb-a8d2-3f908c2a1ce3.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 36175 IP address blocks: 66.43.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:ad:8a:d5:3e:3a:5f:5d:1f:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=03f4ad14-f3c7-457d-bffd-5711cf392fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:51:21:6a:9f:5b:ea:98:70:a9:e8:06:03: 56:d5:f8:28:00:b9:d5:68:32:f7:53:83:89:95:94: 8b:a9:d8:79:e3:63:55:62:2d:f5:e0:41:99:06:f1: dd:b7:54:b7:ab:63:d7:f2:fe:61:bc:c4:01:7e:55: cc:51:9e:1d:19:b9:ae:df:cf:d5:71:27:9a:60:a1: 72:53:fd:62:d1:12:a3:70:ad:f9:97:bf:5e:90:6a: de:e6:a2:af:a5:d5:22:78:b5:8d:d0:f3:52:16:c7: cb:99:93:75:37:64:46:5a:04:3a:97:c3:8d:41:63: c3:15:b5:a8:ed:d6:ca:44:9e:85:ef:39:0a:8b:94: 4e:84:c0:41:0c:22:c0:00:6e:b0:30:d0:43:46:55: 2b:4c:59:22:d6:b2:cb:f2:44:e9:1f:81:56:a0:c6: af:5f:a0:1b:43:da:78:2e:21:c1:11:2c:8b:79:17: e2:8c:b7:74:5e:50:73:2a:1e:9e:af:48:31:85:c1: ac:21:6e:d9:09:d9:24:01:6c:f9:80:ad:f7:e1:79: 69:eb:fc:4c:9c:70:4d:f5:06:55:3d:1e:77:89:b9: 26:db:04:09:ea:75:8b:9a:f6:b4:e2:87:bf:db:ee: 95:94:68:cf:e5:bb:13:5d:ea:de:c8:cd:0b:ac:cf: d2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9C:95:8B:89:F4:79:6F:ED:9F:21:68:96:E0:E9:94:31:A9:53:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/a0467b4e-5d33-3ebb-a8d2-3f908c2a1ce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl X509v3 Authority Key Identifier: keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer sbgp-ipAddrBlock: critical IPv4: 66.43.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:3a:e8:fb:34:1d:64:25:66:9d:ed:90:ce:08:91:c1:92:94: 9b:58:1c:2e:aa:73:d6:4b:f9:31:d6:8d:21:8d:b0:ba:4b:63: db:12:88:75:34:b4:b0:bf:e1:70:08:ca:69:e2:60:dd:5f:cc: 6d:97:78:71:5b:95:8e:f4:1f:44:53:e3:04:41:6c:6a:44:8e: e6:96:7c:98:f3:74:ed:46:9c:06:91:8b:4f:af:61:3e:4a:20: 0f:79:7a:a3:96:d7:3e:c2:f8:11:70:e3:9c:e0:c1:4f:59:fd: c4:77:de:51:3d:d6:9f:ed:14:2a:a0:3f:ae:7a:3f:10:37:73: ae:e6:e5:af:97:f4:95:f2:88:6f:81:b5:7a:1b:12:c7:f5:4c: 6f:5d:a2:25:0d:cf:78:6b:88:76:86:d9:de:f1:ef:96:50:11: 36:23:7a:af:71:32:59:45:96:63:bb:b8:d8:8b:b5:ab:dc:00: b9:c7:e7:9f:6a:50:a2:a2:d3:74:35:3f:de:19:f3:10:9a:66: 5c:ab:cf:eb:a4:4c:7e:0b:e0:d4:5f:d5:76:a2:f1:b5:34:98: fc:f4:03:6e:8e:bd:2e:5d:03:e1:5b:a2:6f:cf:f3:a0:1b:65: f3:6f:8b:e4:39:de:0a:b6:5b:f5:40:c0:b9:c2:bf:7c:c3:fd: 2b:d2:f5:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLq2K1T46X10fYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU0ODNmMmYtY2JhYS00YzJiLWE5ZTQtOGFmM2MwZjg2 OTA3MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk MDNmNGFkMTQtZjNjNy00NTdkLWJmZmQtNTcxMWNmMzkyZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAxRIWqfW+qYcKnoBgNW1fgoALnVaDL3U4OJ lZSLqdh542NVYi314EGZBvHdt1S3q2PX8v5hvMQBflXMUZ4dGbmu38/VcSeaYKFy U/1i0RKjcK35l79ekGre5qKvpdUieLWN0PNSFsfLmZN1N2RGWgQ6l8ONQWPDFbWo 7dbKRJ6F7zkKi5ROhMBBDCLAAG6wMNBDRlUrTFki1rLL8kTpH4FWoMavX6AbQ9p4 LiHBESyLeRfijLd0XlBzKh6er0gxhcGsIW7ZCdkkAWz5gK334Xlp6/xMnHBN9QZV PR53ibkm2wQJ6nWLmva04oe/2+6VlGjP5bsTXereyM0LrM/S+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaclYuJ9Hlv7Z8haJbg6ZQxqVMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTQ4 M2YyZi1jYmFhLTRjMmItYTllNC04YWYzYzBmODY5MDcvYTA0NjdiNGUtNWQzMy0z ZWJiLWE4ZDItM2Y5MDhjMmExY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmU0ODNmMmYtY2JhYS00YzJiLWE5 ZTQtOGFmM2MwZjg2OTA3L2JlNDgzZjJmLWNiYWEtNGMyYi1hOWU0LThhZjNjMGY4 NjkwNy5jcmwwHwYDVR0jBBgwFoAUTmq1lDv9BWbGGz6WTJWAGkgd3sEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTQ4M2YyZi1jYmFhLTRjMmItYTllNC04YWYz YzBmODY5MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQisQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU66Ps0HWQlZp3tkM4IkcGSlJtYHC6qc9ZL+THWjSGNsLpLY9sSiHU0 tLC/4XAIymniYN1fzG2XeHFblY70H0RT4wRBbGpEjuaWfJjzdO1GnAaRi0+vYT5K IA95eqOW1z7C+BFw45zgwU9Z/cR33lE91p/tFCqgP656PxA3c67m5a+X9JXyiG+B tXobEsf1TG9doiUNz3hriHaG2d7x75ZQETYjeq9xMllFlmO7uNiLtavcALnH559q UKKi03Q1P94Z8xCaZlyrz+ukTH4L4NRf1Xai8bU0mPz0A26OvS5dA+Fbom/P86Ab ZfNvi+Q53gq2W/VAwLnCv3zD/SvS9Rc= -----END CERTIFICATE-----Generated at Sun Apr 13 02:44:54 2025 by rpki-client